Shulou(Shulou.com)06/01 Report--

Sarbanes-Oxley Act (SOX)

What is SOX?

In response to accounting scandals involving Enron, Tyco, WorldCom and other companies, the Sarbanes-Oxley Act (SOX) was promulgated in 2002. SOX requires that electronic records not be destroyed, altered or tampered with; it requires that all review / review records be retained for five years; and that all business records (including e-mail) must be stored for 180 days.

What requirements does SOX make for privileged accounts?

Section 404 of the SOX, which is generally considered the most expensive part of the bill to implement, requires companies to take a series of checks to ensure the authenticity of financial statements. Defining and controlling access to privileged accounts is the most important part of Section 404 compliance, especially for those who have access to the financial system.

Financial services companies must be able to prove that all their records are maintained. This means creating an audit trail to record visits and activities in the company's system.

Problem discussion

Has your company taken any action to comply with SOX Section 404?

Is there a policy in place to track who has access to your data? How do you follow this strategy?

Are there any controls in place to track and monitor your privileged account?

How is access to privileged accounts included in your plan for SOX compliance? (did you know that failure to define, enforce, and document access policies can lead to violations of compliance requirements? )

Do you know where all your privileged credentials are stored? Can powerful credentials be accessed through multiple networking terminals?

What help can Haiyi's privileged account management system bring?

The basic requirement of SOX is that companies must make plans to ensure that data is maintained and that financial systems are not tampered with at will. Haiyi-PAS can effectively develop and implement such plans. It makes it easier to make access rules for all users. It is trusted by the review body because of the way it implements these controls. Finally, Haiyi-PAS can also provide evidence-a review trail that indicates that access control has been taken.

Review / / Compliance: Haiyi-PAS exclusively introduces a solution that sets, tracks, and manages privileged security policies in a unified interface. With Haiyi-PAS, you get a complete review trail that shows who is accessing the system, what they are doing in the system, and when they are accessing the system.

Password management for applications: banking applications need secure, high-availability solutions to authenticate users or other applications and provide passwords immediately. Haiyi-PAS is the only solution that provides application authentication and local caching to meet the performance / high availability requirements of application passwords.

Real-time monitoring / / root cause analysis: Haiyi-PAS provides real-time insight into what is going on in any financial services system. The detected abnormal activity is terminated immediately; the source of the abnormal activity is immediately identified.

Enterprise solution: Cyber-Ark is an enterprise solution that can be fully integrated into your existing enterprise environment.

Customer use ca

Deutsche Bank

ING International Group

Surekam Bank

Key Bank

Viking financial Corp.

Barclays Bank

Glatfelterse Insurance Group

Xuhaoping@haiyisec.com

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.